OnlyWin Casino Privacy Policy
Handing over your ID and your Interac details to an offshore casino deserves more than a shrug, so this independent review breaks down what OnlyWin Casino collects from Canadian players, why it collects it, and what you can actually do about it. No legalese wall — just the plain version, with the operator’s verified details attached where they exist.
What personal information does OnlyWin collect?
OnlyWin collects three broad buckets of data: identity details you type in at sign-up, financial and gameplay records generated every time you deposit or spin, and technical information your browser hands over automatically. All three are tied to your account and to the operator’s licensing and anti-money-laundering duties under its Curaçao licence.
Personal data collected during registration
Opening an account means giving the usual identifiers: name, date of birth, email address, phone number, residential address, currency preference and login credentials. Age and location matter here for a specific reason — OnlyWin is not registered with iGaming Ontario or the AGCO, so Ontario residents are turned away and pointed to locally regulated iGO/AGCO sites. Your declared province is part of how that filter works.
Verification adds a second layer. Before a first cash-out is approved, the casino asks for a government-issued ID and a utility bill, and that first withdrawal is commonly delayed one to three days while those documents are reviewed. Step-by-step account setup lives on the sibling page: OnlyWin sign-up process.
Transaction and gaming activity data
Every movement of money leaves a record — deposit amounts, withdrawal requests, timestamps and the rail you used, whether that’s Interac e-Transfer, Visa, Mastercard, bank transfer, MuchBetter, MiFinity, Neosurf, Flexepin or crypto (BTC/ETH/LTC/USDT/DOGE). The operator needs the payment fingerprint to send funds back to the same source, which is standard closed-loop practice.
Gameplay is logged too: which titles you open from studios like Pragmatic Play, Evolution, Play’n GO, Relax Gaming, 3 Oaks, Endorphina, OneTouch and Pragmatic Play Live, bet sizes, session length, bonus activations and wagering progress. That log is how a 40x requirement and a $7 max bet with an active bonus get enforced in the first place.
Technical data and cookies
Your IP address, device type, browser, operating system and language settings are captured on connection. Because there is no App Store or Google Play app — Android users install a downloadable APK and everyone else uses the HTML5/PWA mobile site — device data also tells the casino which build to serve you.
| Data type | Where it comes from | Main purpose |
|---|---|---|
| Identity details | Registration form | Age and province checks, account ownership |
| ID and utility bill | KYC upload before first cash-out | Verification and payout approval |
| Payment records | Interac, cards, bank transfer, e-wallets, crypto | Processing deposits and withdrawals |
| Gameplay logs | Slot and live tables in the lobby | Bonus wagering tracking, fairness records |
| Technical data | Browser, APK or PWA session | Security, fraud flags, site delivery |
How does OnlyWin use your information?
Data use falls into three practical lanes: keeping the account running and verified, moving money safely while blocking fraud, and shaping the promotions you see. The first two are obligations the operator cannot skip; the third is the one you can switch off without losing access to your balance.
Account management and verification
Your details keep the account functional — password resets, balance history, support tickets, and the KYC review that unlocks withdrawals. Support runs through live chat (a bot first, then a human) and email, listed as 24/7, with no phone line, so anything you send in a chat transcript becomes part of your account record.
Payment processing and fraud prevention
Payment and identity data travel to the processors handling your chosen rail so funds can settle: crypto lands one to four hours after verification, Interac e-Transfer takes 12 to 48 hours after approval with most transactions arriving between 24 and 48 hours, and bank wires run three to five business days, up to seven with banking delays. The same records feed fraud checks — matching deposit and withdrawal sources, spotting duplicate accounts, and catching bonus abuse against the terms. The full rulebook sits here: OnlyWin terms and conditions.
Marketing communications and personalization
Email and SMS marketing, plus tailored offers based on which games you actually play, run off your activity profile. The welcome bonus you see promoted — 100% UP TO $7,500 + UP TO 200 FS, with 40% … correction: with 40x wagering, 31 days from activation, min deposit $30-$40, max bet $7 with an active bonus, max win from cash bonuses $2,500 and max free spins winnings $200 — is pushed through those same channels. Marketing consent is separate from the account itself, and you can withdraw it.
How does OnlyWin protect your data?
The operator behind OnlyWin is Goodfly N.V., at Veerstraat 1, Willemstad, Curaçao, licensed by the Government of Curaçao under licence number 163359. That is an offshore licence, not a Canadian provincial one, which shapes both the protections you get and the escalation route if something goes wrong.
Security measures to protect personal data
Standard casino-grade controls apply: encrypted connections between your browser and the site, access limits on who inside the company can open your KYC file, and payment data passed to licensed processors rather than kept loose. Your own habits matter just as much — a unique password and a locked phone do more than any policy clause.
Data encryption and secure storage
ID scans and utility bills are the highest-risk documents you will ever upload to a gambling site, so send them only through the account’s verification interface or an email thread you started with support — never through a link that arrives out of the blue. Check the padlock in your address bar before uploading anything, and treat any request for full card numbers or your banking password as a red flag.
How long is your data kept?
Account, transaction and verification records are held while your account is open and for a further period afterwards, because gambling licences and anti-money-laundering rules require operators to keep financial trails available for inspection. OnlyWin does not publish an exact retention figure in its Canadian-facing material, so ask live chat for the specific period that applies to your account before you request closure.
What are your privacy rights?
You can ask what OnlyWin holds on you, correct anything wrong, request deletion within legal limits, and opt out of marketing entirely. Because the licence is Curaçao-based rather than Canadian, these requests are handled under the operator’s own policy and licence conditions, not by a provincial regulator — so put everything in writing.
Access to your personal data
Email support or open a live chat and request a copy of the personal data linked to your account: registration details, verification status, transaction history and marketing preferences. Keep the ticket reference. A written trail is your only leverage with an offshore operator if a request stalls.
Right to correction and deletion
Typos in a name or an outdated address should be fixed fast, since mismatched details between your ID and your account are the classic cause of a delayed first payout. Deletion is more limited: verified transaction and KYC records tied to anti-money-laundering duties generally cannot be erased on demand, and closing an account is not the same thing as wiping its history. Ask for confirmation of what will actually be deleted versus retained.
Opting out of marketing communications
Unsubscribe links in promotional emails, plus a preferences toggle in the account area, cut the marketing flow while leaving transactional messages — withdrawal confirmations, verification requests — intact. If you want a harder stop than an unsubscribe, self-exclusion and deposit-limit routes are covered here: OnlyWin responsible gambling. A wider look at the operator sits on Home.
Frequently Asked Questions about OnlyWin
What personal information does OnlyWin collect?
Registration details such as name, date of birth, address, email and phone; verification documents including a government-issued ID and a utility bill; transaction records from Interac e-Transfer, cards, bank transfer, MuchBetter, MiFinity, Neosurf, Flexepin or crypto; plus gameplay logs and technical data like IP address, device and browser.
How does OnlyWin protect my data?
The operator, Goodfly N.V. in Willemstad, Curaçao, runs under Government of Curaçao licence 163359 and applies encrypted connections, restricted internal access to verification files, and licensed payment processors for financial data. Since the licence is offshore rather than Canadian, your own password hygiene carries real weight too.
Can I request deletion of my personal data?
You can ask, and marketing profiles and unnecessary contact details are usually removable. Verified identity documents and transaction histories tied to anti-money-laundering obligations are typically retained for a set period after closure, so request written confirmation of exactly what gets deleted and what stays on file.
Does OnlyWin share my information with third parties?
Data goes to the parties needed to run the account: payment processors handling Interac, Visa, Mastercard, bank transfers and e-wallets, verification providers reviewing your ID and utility bill, and game studios such as Pragmatic Play or Evolution for session delivery. Regulators can also request records under the Curaçao licence.
Read the privacy terms, get your ID and utility bill ready before your first cash-out, and only then decide whether OnlyWin Casino suits you.